Coinbase Global Inc., the largest US-based cryptocurrency exchange, disclosed a data breach that compromised the personal information of a select group of customers, including prominent figures in the tech industry. The breach, which the company estimates could cost up to $400 million in remediation and reimbursements, involved cybercriminals bribing overseas customer service representatives to gain unauthorized access to sensitive user data. Among the Coinbase Global Inc. customers whose personal information was compromised in a hack of the exchange was Sequoia Capital Managing partner Roelof Botha, a person familiar with the matter said. The source, who requested anonymity due to the sensitive nature of the information, confirmed that details linked to Botha’s Coinbase account—including his phone number, address, and other personal data—were compromised. Coinbase refuses $20M ransom as hackers target high-profile investors Coinbase revealed on Thursday that attackers had paid off customer service representatives in India with cash to obtain client information illicitly. Bloomberg News reported that the stolen content contained names, dates of birth, addresses, nationalities, government ID numbers, some banking data, and information about the creation dates and balance of accounts. The hackers later asked for $20 million in ransom from Coinbase to not disclose the breach, which was an extortion attempt that the company declined. Coinbase said in an interview with Bloomberg that strange logs from some of its customer service representatives were noticed as early as January. Coinbase CEO Brian Armstrong said the company was refusing to pay the ransom and would instead offer a $20 million bounty for anyone who provided information that led to the attackers’ arrest. The fact that the attackers obtained Botha’s previously unreported information suggests they were specifically targeting wealthy and influential individuals. Botha is a member of the so-called PayPal Mafia, a group of former PayPal employees that includes notable figures like Peter Thiel and Elon Musk. He joined Sequoia, one of the world’s leading venture capital firms, in 2003, where he made early investments in companies such as YouTube and Instagram. He became the firm’s senior steward in 2022. Coinbase declined to comment on the incident. Botha did not respond to requests for comment, and Sequoia Capital also declined to speak on the matter. According to the source, some Coinbase customers received alerts last weekend notifying them that their information may have been improperly accessed. The cyber attack comes days before the US company is set to join the benchmark S&P 500 index, a landmark moment for the crypto industry. It also reflects how, as it grows, the industry has increasingly become a target for cybercriminals. Crypto execs face new threats as France races to curb kidnappings and hacks A report from research firm Chainalysis suggests funds stolen from crypto businesses totaled $2.2 billion in 2024. The security of crypto executives has become an increasing concern as the industry gains visibility. On Friday, France’s interior ministry convened a group of industry leaders to outline immediate measures aimed at curbing a recent wave of kidnappings targeting crypto executives. These actions include special security checks at the homes of crypto leaders and tailored briefings for them and their families. This meeting followed a failed daylight kidnapping attempt targeting the daughter and grandson of the CEO of Paymium, a cryptocurrency exchange based in Paris. Before this, the father of another crypto millionaire was abducted but released two days later. The cryptocurrency sector has long been a target for hackers. In February, suspected North Korean attackers exploited the Bybit exchange, resulting in a $1.5 billion breach that security experts described as the largest of its kind to date. KEY Difference Wire : the secret tool crypto projects use to get guaranteed media coverage
